Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Vrsw37USqcGGCWe1tXZhgAo0it8.roa
File: Vrsw37USqcGGCWe1tXZhgAo0it8.roa (raw, json)
Hash identifier: AYqj/Ix18j9q5B3PvJExsNrU1A8vLMGxF895Fs5TzVo=
Subject key identifier: 56:BB:30:DF:B5:12:A9:C1:86:09:67:B5:B5:76:61:80:0A:34:8A:DF
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0199F2451AC5CC525A51F2EB465A83CEDF17
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Vrsw37USqcGGCWe1tXZhgAo0it8.roa
Signing time: Fri 17 Oct 2025 13:03:59 +0000
ROA not before: Fri 17 Oct 2025 13:03:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 157.25.130.0/23 maxlen: 23
157.25.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:f2:45:1a:c5:cc:52:5a:51:f2:eb:46:5a:83:ce:df:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Oct 17 13:03:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=56bb30dfb512a9c1860967b5b57661800a348adf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:12:28:18:d7:e0:d3:30:59:a5:f2:a5:4f:b2:
93:94:1e:64:f6:8f:bd:9f:ab:8a:b5:44:48:8d:68:
e7:f3:37:3f:1c:aa:03:7e:9e:67:6b:e9:01:d4:1e:
88:76:6c:75:a9:71:f2:04:96:86:b9:d6:02:78:08:
68:b0:3e:35:82:65:31:a6:8f:3d:53:f6:27:ea:8a:
c5:21:07:a0:5a:5e:72:a4:d4:45:52:cc:96:1b:c2:
42:42:e4:4e:46:56:a6:96:18:2f:82:04:36:35:96:
0f:16:92:b7:78:45:39:f4:30:90:9a:07:e7:16:cb:
73:57:41:12:0c:d9:b6:26:c6:68:90:6f:68:b0:12:
1b:e9:1a:1b:31:46:14:bb:5b:df:4b:40:44:36:9c:
44:cf:4b:44:7e:8e:34:b6:7a:ed:9c:5d:8d:70:de:
2a:5a:5a:24:0a:a7:64:20:85:80:24:73:ae:42:e4:
02:35:49:4d:47:88:a0:6a:d4:a0:87:a9:5c:88:2f:
f8:2e:fe:90:34:a5:7a:b6:1b:65:8b:3c:85:db:e9:
b6:79:dc:61:76:5b:47:9d:8c:bf:84:2c:93:4e:6a:
8c:b8:ac:41:79:ad:eb:54:36:fe:a7:6d:f2:fa:dc:
e2:6e:75:d8:48:3a:81:77:4c:8d:75:4c:37:b3:f9:
19:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BB:30:DF:B5:12:A9:C1:86:09:67:B5:B5:76:61:80:0A:34:8A:DF
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Vrsw37USqcGGCWe1tXZhgAo0it8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.130.0/23
157.25.174.0/23
Signature Algorithm: sha256WithRSAEncryption
7f:9c:ae:cc:be:ef:81:5e:9e:eb:56:bd:68:6e:af:1f:cf:ee:
30:e5:31:2f:ab:c6:47:e1:66:4d:6f:1b:92:6e:17:c1:6a:47:
73:42:2b:73:9b:4a:82:8f:c6:7a:2b:34:a8:74:2d:35:ff:92:
ea:b6:8b:de:0d:09:89:b7:59:25:42:3e:43:8a:c3:49:76:20:
be:22:91:47:17:e2:02:b4:30:88:26:69:9b:98:c8:62:9c:e1:
e3:ae:af:34:a0:c3:a2:bc:34:3d:33:53:4d:47:49:84:3d:36:
8b:35:bf:f8:d0:01:98:50:21:5d:37:94:f7:03:6f:50:14:5d:
7d:aa:98:6f:69:9b:92:80:61:ef:cf:7c:13:f1:85:dd:cc:36:
67:e5:e8:5f:fe:69:70:e8:93:57:2d:66:38:9b:5d:8b:7c:06:
eb:80:ec:50:f8:83:4e:07:a4:99:10:7d:02:cc:50:75:70:03:
23:43:3b:02:7d:b9:b4:07:80:78:49:2f:c9:9c:f8:b5:8e:64:
f1:8b:2f:ea:e3:5b:d6:02:95:3d:47:b9:ca:1e:96:95:94:f8:
24:6a:00:f6:38:86:7a:c2:bd:2d:80:10:41:08:f1:c8:e5:d3:
86:8e:37:c0:e2:32:0e:9d:73:f6:ae:01:4e:37:78:94:75:3b:
9d:d1:03:6d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZnyRRrFzFJaUfLrRlqDzt8XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2E2M2RmMjQ4YjdhZGYzZGRkMDdlOGMyZDNlZWRkMDJj
ZWY5MzMwHhcNMjUxMDE3MTMwMzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1NmJiMzBkZmI1MTJhOWMxODYwOTY3YjViNTc2NjE4MDBhMzQ4YWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBIoGNfg0zBZpfKlT7KTlB5k9o+9
n6uKtURIjWjn8zc/HKoDfp5na+kB1B6Idmx1qXHyBJaGudYCeAhosD41gmUxpo89
U/Yn6orFIQegWl5ypNRFUsyWG8JCQuRORlamlhgvggQ2NZYPFpK3eEU59DCQmgfn
FstzV0ESDNm2JsZokG9osBIb6RobMUYUu1vfS0BENpxEz0tEfo40tnrtnF2NcN4q
WlokCqdkIIWAJHOuQuQCNUlNR4igatSgh6lciC/4Lv6QNKV6thtlizyF2+m2edxh
dltHnYy/hCyTTmqMuKxBea3rVDb+p23y+tzibnXYSDqBd0yNdUw3s/kZiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFFa7MN+1EqnBhglntbV2YYAKNIrfMB8GA1UdIwQY
MBaAFBrKY98ki3rfPd0H6MLT7t0CzvkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzIt
OTFlMzE4NGJiMGFiLzEvVnJzdzM3VVNxY0dHQ1dlMXRYWmhnQW8waXQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xZjY0NTgtZGM3NS00YWRkLWFlNzItOTFlMzE4NGJiMGFi
LzEvR3NwajN5U0xldDg5M1Fmb3d0UHUzUUxPLVRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBnRmCAwQB
nRmuMA0GCSqGSIb3DQEBCwUAA4IBAQB/nK7Mvu+BXp7rVr1obq8fz+4w5TEvq8ZH
4WZNbxuSbhfBakdzQitzm0qCj8Z6KzSodC01/5LqtoveDQmJt1klQj5DisNJdiC+
IpFHF+ICtDCIJmmbmMhinOHjrq80oMOivDQ9M1NNR0mEPTaLNb/40AGYUCFdN5T3
A29QFF19qphvaZuSgGHvz3wT8YXdzDZn5ehf/mlw6JNXLWY4m12LfAbrgOxQ+INO
B6SZEH0CzFB1cAMjQzsCfbm0B4B4SS/JnPi1jmTxiy/q41vWApU9R7nKHpaVlPgk
agD2OIZ6wr0tgBBBCPHI5dOGjjfA4jIOnXP2rgFON3iUdTud0QNt
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:46:37 2025 by rpki-client